G6: Cloudflare Workers page with the limits first; dead links (#288); fileStore in approvals

[LinuxDevil]

Closes #203
Closes #288

What changed

• New page docs/cloudflare-workers.md: intro, a table of what works and what does not (first content, wrapped in a LIMITS TABLE comment so the OpenRouter / http work can update it in one place), then Build and deploy, Bindings, Sessions/checkpoints/approvals, Scheduled runs, Consistency, Bundle size and Node builtins. Text moved unchanged from docs/deployment.md, including the outbound-HTTP limits text from [N13a] web_fetch built-in with pinned-DNS SSRF checks; http_request no longer open to DNS rebinding #277 and the KVStore from /kv example from [R2] Export KVStore from a /kv subpath and add fileStore(dir) #292.
• docs/deployment.md: the three Worker subsections are removed; ## cloudflare-worker is a short summary linking to the new page. ### Optional peers... stays.
• Links: providers.md and schedules.md repointed; #cloudflare-worker links elsewhere still resolve.
• Docs: two links point to headings that do not exist (executor-api.md, troubleshooting.md) #288: executor-api.md -> tools.md#advanced-toolregistry; troubleshooting.md -> mcp.md#use-mcp-servers-in-an-agent. A script checking every relative file.md#anchor link in docs/ and README.md against the headings found no other dead anchor.
• docs/approvals.md: fileStore(dir) row in the approval stores table (no heading changes).
• README docs table row, CHANGELOG entries, llms.txt / llms-full.txt regenerated.

Table cells checked against source

• Providers: src/deploy/adapters/cloudflare.ts:52 WORKER_SUPPORTED_PROVIDERS, :264- assertProviderSupported.
• Tools: cloudflare.ts:41 WORKER_SUPPORTED_TOOLS, assertToolsSupported; src/deploy/runtime.worker.ts:29.
• Sandbox: src/deploy/shims/sandboxCore.worker.ts:17.
• stdio MCP / file store: src/deploy/shims/node.worker.ts (shim fails when used), src/deploy/bundle.ts:103.
• Spec files only: docs/deployment.md agent-directories section; KV and cron text moved from the existing docs.
• Not verified: MCP over HTTP on Workers (written "not verified"); node-server/docker column of the schedules and bundle rows are taken from the existing docs.

Verification

npx tsc --noEmit, npm run lint (0 warnings), npm run build, docs:verify-snippets -- --skip-build (207 snippets type-check), docs:llms:check, npx vitest run docs examples src/cli (30 files, 493 passed, 1 skipped): all pass. Documentation-only; no live calls, no spend.

For the docs site (G9)

• New page: cloudflare-workers (PAGES entry, docs.json navigation in both languages, Arabic translation).
• Restructured: deployment (three headings removed, summary rewritten); full Arabic re-sync, the moved Arabic sections can move to the new page.
• Edited only (no heading changes): approvals, executor-api, providers, schedules, troubleshooting, README.

🤖 Generated with Claude Code